WhatIsMyIP.live Reputation Engine

Blacklist & Reputation Passport for 172.94.9.154

172.94.9.154 · IPv4

89/ 100

Critical

Current blacklist or threat-intelligence evidence found

The WhatIsMyIP.live score combines severity, confidence, freshness and independent origins. It is our aggregation score, not a score copied from any single provider.

Risk score89 / 100

Confidence76%

Current matches2

Independent origins2

Fresh source coverage7/7

Current evidence

Aggregated malicious activity Malicious network infrastructure

Spamhaus DROP

Current source data

CategoryMalicious network infrastructure

Match typeNetwork prefix match

Matched value172.94.9.0/24

SBL reference: SBL692903

A prefix match means the IP falls inside a listed network range; it does not claim the exact address was individually reported.

IPsum

Current source data

CategoryAggregated malicious activity

Match typeExact IP match

Matched value172.94.9.154

2 source-list matches

Intelligence source coverage

Freshness matters. Stale sources remain visibly marked and are discounted in scoring rather than silently treated as current.

Source	Supports	Status	records	Last successful refresh
Spamhaus DROP The Spamhaus Project	IPv4	Ready	1,678	2026-07-16T10:49:38+00:00
IPsum IPsum / Miroslav Stampar	IPv4	Ready	103,992	2026-07-16T10:49:38+00:00
DShield Recommended Block List SANS Internet Storm Center / DShield	IPv4	Ready	20	2026-07-16T20:40:34+00:00
blocklist.de SSH attacks blocklist.de	IPv4	Ready	5,153	2026-07-16T10:49:39+00:00
blocklist.de Mail attacks blocklist.de	IPv4	Ready	13,147	2026-07-16T10:49:40+00:00
blocklist.de Web attacks blocklist.de	IPv4	Ready	8,889	2026-07-16T10:49:40+00:00
blocklist.de Bots blocklist.de	IPv4	Ready	4,394	2026-07-16T10:49:40+00:00

What should you do?

Home or mobile user: restart the router if your ISP assigns dynamic addresses, scan devices for malware, and contact your ISP if reputation problems continue.

Server owner: review authentication and web logs, patch exposed services, check accounts and outbound traffic, and remediate compromise before requesting delisting.

Mail administrator: review outbound mail, reverse DNS, authentication records and compromised accounts before troubleshooting delivery or requesting delisting.

Observed history

Dates below show when this WhatIsMyIP.live engine recorded a state, not necessarily when the original threat activity first occurred.

First matched by this engine2026-07-17 10:28:46

Most recent matched check2026-07-17 10:28:46

Historical maximum score89/100

89/100 · Critical2026-07-17 10:28:46

Sources and attribution

Results retain source attribution. A match may come from a third-party dataset, while the combined score, freshness handling and history are produced by WhatIsMyIP.live.

Open IP Passport Proxy & VPN check Reverse DNS